This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json) Hash identifier: JdogOGJE1J7F1h9/gBkCf1ZUvD63J3jQPYo7DDoAWfQ= Subject key identifier: 71:6C:9F:FA:FF:6C:C9:0F:78:3C:71:B7:D6:6E:B2:42:AD:5A:61:A2 Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac Certificate serial: 019AF240303D4E7D06F4257FDA67F26B9B49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft Manifest number: 0A83 Signing time: Sat 06 Dec 2025 06:01:24 +0000 Manifest this update: Sat 06 Dec 2025 06:01:24 +0000 Manifest next update: Sun 07 Dec 2025 06:01:24 +0000 Files and hashes: 1: A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa (hash: TKnnwgB4D2OW3syeJW6W6YQDxOjqWLylQxuIymjfrLw=) 2: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: bj4egifNUnTeeZQCqtE2EMtSOq0p8ewoFFVGc5VD96c=) 3: Ka_z-__yfPUNdCEkEmrWJv_gA2o.roa (hash: u3MD0TaHO1ydISnjdsribaPZzm3duPVcA9ePVcYit+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:30:3d:4e:7d:06:f4:25:7f:da:67:f2:6b:9b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac Validity Not Before: Dec 6 06:01:24 2025 GMT Not After : Dec 7 06:01:24 2025 GMT Subject: CN=716c9ffaff6cc90f783c71b7d66eb242ad5a61a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:96:46:6a:dd:3e:16:96:8c:1c:b3:50:9d:2c: 97:23:ee:5d:28:de:8e:d9:77:33:ca:21:dc:62:83: 49:98:9a:7f:fc:ee:62:d5:bb:0e:b9:a5:a6:eb:94: b1:d5:66:ae:39:52:60:22:c2:04:1e:e7:98:1e:6c: e9:0c:fe:ae:2b:83:de:b0:62:80:c9:4a:2c:e0:76: 0e:e9:9c:4d:2d:fb:93:1c:34:44:56:13:e7:a8:12: 67:0b:cb:49:4a:3a:ad:2e:ff:b0:c3:47:d1:95:c2: 30:5f:52:d6:39:58:93:56:39:83:c5:d0:1c:33:ca: ef:07:15:a3:3c:54:c7:cf:c1:7e:ed:76:13:94:ad: 45:0c:65:6f:6f:d3:96:a2:f0:8a:a1:7b:74:62:71: b8:f7:66:6b:1a:f4:6e:2e:77:b3:a8:7c:2a:23:04: 8c:c7:4e:39:e2:a4:c3:d6:30:4d:93:81:ef:3b:8c: 09:c1:98:cb:1a:1c:5b:ba:05:ec:87:30:c4:39:e6: 10:3c:cb:fa:6f:8b:41:f1:97:9d:f3:9a:d5:55:f5: 67:8c:26:49:b6:45:8e:92:58:35:77:69:04:bb:f2: 4a:bc:b0:0d:31:6a:a0:f8:85:73:78:54:12:8b:9e: 3b:d4:19:34:a3:9f:46:46:49:35:ec:7f:72:82:95: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6C:9F:FA:FF:6C:C9:0F:78:3C:71:B7:D6:6E:B2:42:AD:5A:61:A2 X509v3 Authority Key Identifier: keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ad:18:02:d3:29:16:3b:41:f7:f5:70:db:08:98:43:43:58: 3c:79:6c:1a:56:de:d4:05:41:e8:dc:5f:a0:7e:3e:40:8c:e5: f7:2e:aa:7a:09:16:a2:78:1a:ff:7d:14:a1:fb:ab:51:ad:cd: 0d:cd:2a:49:0b:86:6f:ae:c4:96:ad:0a:92:1d:4b:f9:81:41: a8:8a:6a:19:2d:f0:78:0f:35:55:69:86:2b:03:72:cd:91:11: 31:4b:b6:d7:c2:07:78:3d:b2:78:f1:4f:6e:27:34:30:80:ae: 35:6b:fb:da:66:c4:25:fe:5d:94:83:71:a0:46:12:6c:59:35: 49:94:c0:74:44:ff:06:ba:a0:6b:54:f7:56:24:85:23:e3:59: d0:20:73:c8:6a:03:ac:14:b2:ee:1f:b9:69:46:ef:47:6e:5d: ef:32:57:f2:81:3d:94:f2:a4:c9:91:77:49:fa:34:ee:69:55: 4b:a6:98:d2:dc:f4:94:e2:5a:c2:8a:e4:22:33:ed:e3:46:7e: ee:48:17:c0:4d:dd:69:57:95:1c:1f:81:b4:31:e9:dd:de:c5: 11:27:24:6a:74:7d:99:bf:8e:49:6f:8f:f2:81:73:bb:7f:0e: 5d:37:74:38:3c:9b:8b:1b:51:05:33:ee:16:44:ab:8d:39:bf: bd:48:07:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQDA9Tn0G9CV/2mfya5tJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MDBkNzdlZjllYTBlZDI5NTJiZTJmNjBmYWQzYWVjYzJl MTY4YWMwHhcNMjUxMjA2MDYwMTI0WhcNMjUxMjA3MDYwMTI0WjAzMTEwLwYDVQQD Eyg3MTZjOWZmYWZmNmNjOTBmNzgzYzcxYjdkNjZlYjI0MmFkNWE2MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45ZGat0+FpaMHLNQnSyXI+5dKN6O 2XczyiHcYoNJmJp//O5i1bsOuaWm65Sx1WauOVJgIsIEHueYHmzpDP6uK4PesGKA yUos4HYO6ZxNLfuTHDREVhPnqBJnC8tJSjqtLv+ww0fRlcIwX1LWOViTVjmDxdAc M8rvBxWjPFTHz8F+7XYTlK1FDGVvb9OWovCKoXt0YnG492ZrGvRuLnezqHwqIwSM x0454qTD1jBNk4HvO4wJwZjLGhxbugXshzDEOeYQPMv6b4tB8Zed85rVVfVnjCZJ tkWOklg1d2kEu/JKvLANMWqg+IVzeFQSi5471Bk0o59GRkk17H9ygpUOTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFsn/r/bMkPeDxxt9ZuskKtWmGiMB8GA1UdIwQY MBaAFAQA13756g7SlSvi9g+tOuzC4WisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgt YTYwMTM4YzFjMDQ2LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85OGM1YzMtOTkyOC00OTU3LTk0NDgtYTYwMTM4YzFjMDQ2 LzEvQkFEWGZ2bnFEdEtWSy1MMkQ2MDY3TUxoYUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq0YAtMp FjtB9/Vw2wiYQ0NYPHlsGlbe1AVB6NxfoH4+QIzl9y6qegkWonga/30UofurUa3N Dc0qSQuGb67Elq0Kkh1L+YFBqIpqGS3weA81VWmGKwNyzZERMUu218IHeD2yePFP bic0MICuNWv72mbEJf5dlINxoEYSbFk1SZTAdET/Brqga1T3ViSFI+NZ0CBzyGoD rBSy7h+5aUbvR25d7zJX8oE9lPKkyZF3Sfo07mlVS6aY0tz0lOJaworkIjPt40Z+ 7kgXwE3daVeVHB+BtDHp3d7FESckanR9mb+OSW+P8oFzu38OXTd0ODybixtRBTPu FkSrjTm/vUgHIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:31 2025 by rpki-client